CVE-2025-12788 | Hydra Booking Plugin up to 1.1.27 on WordPress tfhb_meeting_paypal_payment_confirmation_callback access control

A vulnerability identified as critical has been detected in Hydra Booking Plugin up to 1.1.27 on WordPress. This affects the function tfhb_meeting_paypal_payment_confirmation_callback. The manipulation leads to improper access controls.

This vulnerability is listed as CVE-2025-12788. The attack may be initiated remotely. There is no available exploit.